Phone Lines icon GFI Support Home

Articles in this section

See more

Adding Items to the HTTPS Scanning Exclusion List

Author: Luis Fernandes

Overview

When HTTPS Inspection is enabled, by default, it will apply to all HTTPS sessions passing through the GFI WebMonitor Proxy. Administrators may wish to exclude domains, users, or client IPs from having their sessions inspected; this may be achieved by adding them to the HTTPS Scanning Exclusion List, as explained in this article.

 

Process

Follow the below processes to exclude based on domains, users, or client IPs:

Excluding Domains

  1. Open the \WebMonitor\Interface\App_Data\ProxyConfig.xml file. In GFI WebMonitor 2015, the Proxyconfig.xml is located in \GFI\WebMonitor\Data.
  2. In the file, locate and remove the <DomainsExceptedFromHTTPSInspection/> tag.
  3. Add the sites to be excluded within a <DomainsExceptedFromHTTPSInspection/> tag, as shown in the example below:
<DomainsExceptedFromHTTPSInspection>
    <string>www.domain.com</string>
    <string>*.domain.com</string>
    <string>*.apple.com</string> 
    <string>*.microsoft.com</string> 
    <string>*.windowsupdate.com</string> 
</DomainsExceptedFromHTTPSInspection>

Excluding Users

  1. Open the \WebMonitor\Interface\App_Data\ProxyConfig.xml file. In GFI WebMonitor 2015, the Proxyconfig.xml is located in \GFI\WebMonitor\Data.
  2. In the file, locate and remove the <UsersExceptedFromHTTPSInspection/> tag.
  3. Add the sites to be excluded within a <UsersExceptedFromHTTPSInspection/> tag, as shown in the example below:

     <UsersExceptedFromHTTPSInspection>
         <string>mydomain\user1</string>
         <string>mydomain\user2</string>
    </UsersExceptedFromHTTPSInspection>

Excluding Client IPs 

  1. Open the \WebMonitor\Interface\App_Data\ProxyConfig.xml file. In GFI WebMonitor 2015, the Proxyconfig.xml is located in \GFI\WebMonitor\Data.
  2. In the file, locate and remove the <UserIPsExceptedFromHTTPSInspection/> tag.
  3. Add the sites to be excluded between a <UserIPsExceptedFromHTTPSInspection/> tag, as shown in the example below:
    <UserIPsExceptedFromHTTPSInspection>
        <string>10.0.0.11</string>
        <string>10.0.0.23</string>
    </UserIPsExceptedFromHTTPSInspection>

Important Notes 

  • It is recommended to make a backup of ProxyConfig.xml before making any changes
  • Changes will be applied as soon as the file is saved.